Sigstore
Signing and transparency tooling for software artifacts, aimed at verifiable provenance without key management burden.
Referenced by
This entry describes what the tool is for, not whether you should adopt it. For a structured comparison where you set the weights, see the decision guides.